March 19, 2026 vulnerability digest: three unpatched WordPress criticals, OpenClaw cluster
Three critical WordPress plugin flaws, all unpatched. A WooCommerce privilege escalation, a BuilderPress file inclusion, and a Profile Builder Pro SQL injection. Plus five OpenClaw command injections and a PX4 drone autopilot crash via MAVLink.
Read more →